Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/323830333a616364303a3a2f33322d3332203d3e20323734303236.roa
File:                     323830333a616364303a3a2f33322d3332203d3e20323734303236.roa (raw, json)
Hash identifier:          3exWin6Al+fAk58EWgyoGEAe1Eduiiv/utTauu06OFU=
Subject key identifier:   05:D5:1A:03:33:23:C8:2E:20:CF:C5:59:DF:36:46:3A:DD:BD:20:44
Certificate issuer:       /CN=B5D91E46260E9AEAE95697E1C0815E51DF174137
Certificate serial:       222A52E0856D7865608F2531F52D53CF2E995ED4
Authority key identifier: B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/323830333a616364303a3a2f33322d3332203d3e20323734303236.roa
Signing time:             Wed 13 May 2026 16:42:19 +0000
ROA not before:           Wed 13 May 2026 16:37:19 +0000
ROA not after:            Wed 12 May 2027 16:42:19 +0000
asID:                     274026
IP address blocks:        2803:acd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 18 May 2026 02:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:52:e0:85:6d:78:65:60:8f:25:31:f5:2d:53:cf:2e:99:5e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D91E46260E9AEAE95697E1C0815E51DF174137
        Validity
            Not Before: May 13 16:37:19 2026 GMT
            Not After : May 12 16:42:19 2027 GMT
        Subject: CN=05D51A033323C82E20CFC559DF36463ADDBD2044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:2c:97:93:b2:a2:d4:11:66:0f:2c:cd:11:
                    2b:80:88:37:1f:6c:85:6b:55:b8:74:4f:b9:2b:36:
                    cf:da:f0:9d:54:af:26:a9:bd:99:fa:e6:db:31:23:
                    47:1c:ed:7c:29:86:cc:da:c2:65:08:83:d2:5b:e1:
                    f3:0f:f3:de:dd:47:a5:14:8c:5a:87:40:ed:af:c3:
                    ad:b3:3d:cb:9e:86:2d:95:bc:22:27:5e:a3:38:60:
                    d0:86:f3:57:16:4a:a1:c7:d6:6b:6a:af:4d:9b:9c:
                    7c:78:56:88:8e:b8:29:1e:52:37:12:ec:e3:a8:f6:
                    9d:dd:40:80:20:b0:e8:6c:64:fc:b3:d7:5c:f6:f7:
                    80:21:46:10:3e:44:31:da:2b:4d:d4:2c:aa:24:79:
                    28:66:f8:f3:d3:da:c0:e8:61:20:50:78:ff:c3:d8:
                    7f:31:60:b9:3e:28:d6:10:1b:ce:a0:b6:52:5f:c3:
                    28:55:f8:ad:34:28:a5:e3:a6:8c:02:39:aa:c9:40:
                    97:3e:e9:5b:7a:97:54:07:ea:36:7f:4c:76:20:00:
                    ea:7d:4f:ef:9e:79:7a:f7:8e:b9:15:ab:ad:e0:b0:
                    03:5a:a9:9e:d2:b9:d0:fe:0e:0f:73:49:3c:20:81:
                    f8:19:b8:cc:be:32:bd:85:ef:24:02:59:32:f2:26:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D5:1A:03:33:23:C8:2E:20:CF:C5:59:DF:36:46:3A:DD:BD:20:44
            X509v3 Authority Key Identifier:
                keyid:B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/323830333a616364303a3a2f33322d3332203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:acd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:cf:f9:49:40:55:2d:2e:ac:c8:97:42:9b:26:cc:df:49:e2:
         6f:2f:3a:5d:40:0a:bc:da:15:19:d6:40:5b:8c:42:86:62:41:
         1f:2e:49:bd:9c:c5:bb:2d:e0:a8:dd:07:4b:40:c3:c2:17:19:
         d3:d5:a1:78:fa:ab:c8:0a:53:cf:50:27:3a:3e:22:15:a5:f3:
         26:68:00:81:2d:a1:2c:82:ce:b9:38:79:28:e0:31:57:13:75:
         8d:20:12:91:0d:30:73:67:74:c0:90:7b:3b:db:62:74:a2:94:
         0d:40:3c:44:f2:73:e9:e5:cd:8e:13:04:a8:d7:f1:a4:46:6b:
         d6:f9:c4:ab:46:4e:44:d3:87:33:12:40:1d:58:cf:f3:7d:39:
         f2:8d:c4:b8:2a:3c:3b:11:46:55:17:09:57:98:0f:c0:95:4c:
         cd:e3:3f:8d:c3:91:a5:bf:06:5b:97:0d:ca:a9:b1:0a:70:4d:
         57:02:7a:3b:f1:fe:fa:e9:46:b4:76:d0:9f:d7:0d:92:e6:2a:
         b7:93:df:d9:9d:a8:80:d6:0a:3a:77:45:33:b9:79:65:bb:a2:
         69:79:0d:57:10:8d:bb:36:49:45:58:a7:44:ab:6e:73:ca:4f:
         7c:4c:e0:46:ab:86:62:a7:a9:02:45:c4:9f:55:bf:ac:59:5b:
         87:14:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:07:49 2026 by rpki-client